A cloud service provider does not allow audits using automated tools as these tools could be considered destructive techniques for the cloud environment. Which of the following aspects of the audit will be constrained?

• A.Nature of relationship
• B.Objectives
• C.Purpose
• D.Scope

Comment: *

Name: *

Email: *

Verification: *

What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

• A.The implications of storing complex information on simple storage systems
• B.The language of the data and how it affects the user
• C.The fragmentation and encryption algorithms employed
• D.The actualsize of the data and the storage format
• E.Thephysical location of the data and how it is accessed

Comment: *

Name: *

Email: *

Verification: *

Which data security control is the LEAST likely to be assigned to an IaaSprovider?

• A.Asset management and tracking
• B.Access controls
• C.Encryption solutions
• D.Physical destruction
• E.Application logic

Comment: *

Name: *

Email: *

Verification: *

The criteria for limiting services allowing non-critical services or services requiring high availability and resilience to be moved to the cloud is an important consideration to be included PRIMARILY in the:

• A.business continuity plan.
• B.cloud policy.
• C.information security standard for cloud technologies.
• D.risk management policy.

Comment: *

Name: *

Email: *

Verification: *

An organization is in the initial phases of cloud adoption. It is not very knowledgeable about cloud security and cloud shared responsibility models. Which of the following approaches is BEST suited for such an organization to evaluate its cloud security?

• A.As this is the initial stage, the ISO/IEC 27001 certificate shared by the cloud service provider is sufficient for audit and compliance purposes.
• B.Use of an established standard/regulation to map controls and use as the audit criteria
• C.Development of the cloud security audit criteria based on its own internal audit test plans to ensure appropriate coverage
• D.For efficiency reasons, use of its on-premises systems' audit criteria to audit the cloud environment

Comment: *

Name: *

Email: *

Verification: *